Tidyr Privacy Policy Android app protection With your explicit permission, Tidyr uses Android AccessibilityService to detect the package name of an app you open and return you to your home screen when a selected distracting app is blocked. It uses window-change events only and cannot retrieve screen content. It does not read messages, capture screens, save app-use history, or send app selections or accessibility events to a server. Selected apps and protection state are saved locally. You can disable Tidyr under Android Settings > Accessibility at any time. This is a voluntary focus feature, not a disability accessibility tool. About this policy Tidyr AI is provided by Cambrien Snyder. This policy explains the data used to provide your cleaning routine, AI room checks, and subscriptions. Contact jcsdevacc@gmail.com with privacy or deletion requests. Updated September 21, 2026. Account and routine data We collect your email and account identifier for sign-in and saved progress. Supabase manages your password securely; it is not sent to OpenAI or Superwall. Your optional name or nickname, room, motivation, obstacles, chosen cleaning areas, cleanliness standard, time commitment, weekdays, deadline, reminder preference, and routine timezone are saved to personalize the service. Onboarding drafts and your chosen light or dark theme are stored on your device. Native account sessions use the iOS Keychain or Android Keystore. Your room photos and AI permission Only after you choose Send photo & check beneath the sharing disclosure, the captured room photo, room type, and selected cleaning areas and standard are sent over encrypted connections through our Supabase server to OpenAI for a cleanliness assessment. We do not send your email or name to OpenAI. Keep people, documents, and private information out of the frame. You can decline by retaking the photo, leaving the scan screen, or not submitting it. Camera permission can be revoked in phone Settings. AI may make mistakes. Photo and progress retention Tidyr processes photos in server memory and does not save photo files to its database or cloud storage. Temporary camera files may remain in the app cache on your device until removed by the app or operating system. Successful checks save their date, score, brief feedback, and a non-reversible photo hash to detect exact reuse. Photo-session timestamps are saved to prevent replay and limit abuse. These account-linked records remain until you delete your account. OpenAI responses are requested with storage disabled; OpenAI may still retain API data for up to 30 days for abuse monitoring, or longer when legally required or permitted under its safety policies. API data is not used for model training by default. Subscriptions and analytics Apple or Google Play processes payments; Tidyr does not receive your card details. Superwall receives your random Tidyr account identifier and purchase history, subscription state, transaction identifiers, paywall interactions, app/device identifiers, device and software information, locale, and approximate location derived from your IP address. This supports purchases, restores, fraud prevention, and measuring and improving our paywalls. We do not send your email, name, room photos, cleaning history, or Screen Time selections to Superwall. A random account identifier is still linked to your Tidyr account; it is not anonymous data. App usage analytics We use PostHog to understand which Tidyr screens and features people use, where setup stops, whether a paywall appears or a purchase finishes, and whether a room check passes, fails, or encounters a service error. Events include a random locally stored analytics identifier, a session identifier, event times, app and operating-system versions, and coarse outcomes and timings. We do not send your Tidyr account identifier, email, name, password, typed answers, room photos, AI feedback, Screen Time selections, or activity in other apps to PostHog. We do not enable session recordings or advertising tracking. We disable IP-based location enrichment; network delivery still exposes an IP address to the provider. Analytics are hosted in PostHog's United States region and retained for up to one year under our current plan. You can stop future collection in Account & privacy > App usage analytics. Signing out or deleting your account resets the local analytics identifier. Because analytics are not mapped to your account, account deletion does not automatically identify historical analytics events; contact us for help with additional privacy requests. Providers and security Supabase hosts authentication and cleaning records; OpenAI assesses photos; Superwall manages paywalls and subscription access; PostHog processes app usage analytics; Apple and Google Play handle store billing; Expo distributes app updates. Hosting and delivery providers may process IP addresses, request times, app version, device information, and operational logs for security and service delivery. Providers may process data outside your country. We use encrypted connections and restrict database access to your account. We do not sell your data or use room photos or Screen Time selections for advertising. Screen Time and reminders Your app, category, and website selections use Apple's protected Screen Time tokens on your device; Tidyr's backend does not receive those tokens, app names, or your activity history. Cleaning notifications are scheduled locally, and notification permission is optional. We do not upload a push token or send marketing notifications. You can change notification, camera, and Screen Time permissions in phone Settings. Deletion and other choices Delete your account in Tidyr Settings or Account & privacy during onboarding, without a subscription. This immediately removes your account, routine, photo-session records, and verified-clean history from our active database and clears this device's onboarding draft, theme preference, restrictions, and reminders. Other devices may keep local drafts and restrictions until you sign out or remove Tidyr there; revoke Screen Time on those devices if needed. Service backups and security logs expire according to provider retention policies. Apple, Google Play, and Superwall purchase and billing records are not erased by deleting the Tidyr database account and may remain for subscription restoration, fraud prevention, and financial obligations. Contact us to request access, correction, or deletion of additional provider-held data; we will coordinate requests subject to required retention. Deleting Tidyr or your account does not cancel a store subscription. Age and changes Tidyr is intended for people aged 13 and older and does not knowingly collect account information from children under 13. If you believe a child supplied data, contact us for deletion. We will update this policy when our practices change and obtain new permission where required before using data for a new purpose.